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Question: 1 


Identify the API that is not supported by Check Point currently. 


A. R80 Management API- 

B. Identity Awareness Web Services API 
C. Open REST API 

D. OPSEC SDK 


Answer: C 


Question: 2 


SandBlast Mobile identifies threats in mobile devices by using on-device, network, and cloud-based 
algorithms and has four dedicated components that constantly work together to protect mobile 
devices and their dat 

a. Which component is NOT part of the SandBlast Mobile solution? 

A. Management Dashboard 

B. Gateway 

C. Personal User Storage 

D. Behavior Risk Engine 


Answer: C 


Question: 3 


What are the different command sources that allow you to communicate with the API server? 


A. SmartView Monitor, API_cli Tool, Gaia CLI, Web Services 

B. SmartConsole GUI Console, mgmt_cli Tool, Gaia CLI, Web Services 
C. SmartConsole GUI Console, API_cli Tool, Gaia CLI, Web Services 
D. API_cli Tool, Gaia CLI, Web Services 


Answer: B 


Question: 4 


On the following picture an administrator configures Identity Awareness: 
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Select how users will be identified by your security gateway 


S 
s 


Ad Query 
The gateway seamlessly identifies Active Directory users and computers 
sairo t Ontong 


Pong 


E F Browser-Based Auhtentication 
<> Transparent Kerberos authentication or Captive Portal 


i 


IF Terminal Servers 
Identify individual users traffic coming from terminal servers (e.g. ...) 
An agent is required on the terminal server 


After clicking “Next” the above configuration is supported by: 


A. Kerberos SSO which will be working for Active Directory integration 

B. Based on Active Directory integration which allows the Security Gateway to correlate Active 
Directory users and machines to IP addresses in a method that is completely transparent to the user. 
C. Obligatory usage of Captive Portal. 

D. The ports 443 or 80 what will be used by Browser-Based and configured Authentication. 


Answer: B 
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Question: 5 


Which TCP-port does CPM process listen to? 


A. 18191 
B. 18190 
C. 8983 

D. 19009 


Answer: D 


Question: 6 


Which method below is NOT one of the ways to communicate using the Management API’s? 


A. Typing API commands using the “mgmt_cli” command 

B. Typing API commands from a dialog box inside the SmartConsole GUI application 
C. Typing API commands using Gaia’s secure shell(clish)19+ 

D. Sending API commands over an http connection using web-services 


Answer: D 


Question: 7 


Your manager asked you to check the status of SecureXL, and its enabled templates and features. 
What command will you use to provide such information to manager? 


A. fw accel stat 
B. fwaccel stat 
C. fw acces stats 
D. fwaccel stats 


Answer: B 


Question: 8 


SSL Network Extender (SNX) is a thin SSL VPN on-demand client that is installed on the remote user’s 
machine via the web browser. What are the two modes of SNX? 


A. Application and Client Service 


B. Network and Application 
C. Network and Layers 
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D. Virtual Adapter and Mobile App 


Answer: B 


Question: 9 


Which command would disable a Cluster Member permanently? 


A. clusterXL_admin down 
B. cohaprob_admin down 
C. clusterXL_admin down-p 
D. set clusterXL down-p 


Answer: C 


Question: 10 


Which two of these Check Point Protocols are used by SmartEvent Processes? 


A. ELA and CPD 

B. FWD and LEA 

C. FWD and CPLOG 
D. ELA and CPLOG 


Answer: D 
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